#PHP,webapps,
-
OpenSIS Community 8.0 - 'cp_id_miss_attn' SQL Injection
-
WordPress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection (2)
-
Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS)
-
Men Salon Management System 1.0 - Multiple Vulnerabilities
-
Wordpress Plugin Download From Files 1.48 - Arbitrary File Upload
-
Apartment Visitor Management System (AVMS) 1.0 - 'username' SQL Injection
-
AlphaWeb XE - File Upload Remote Code Execution (RCE) (Authenticated)
-
Evolution CMS 3.1.6 - Remote Code Execution (RCE) (Authenticated)
-
Support Board 3.3.3 - 'Multiple' SQL Injection (Unauthenticated)
-
Purchase Order Management System 1.0 - Remote File Upload
-
ImpressCMS 1.4.2 - Remote Code Execution (RCE) (Authenticated)
-
Simple Attendance System 1.0 - Authenticated bypass
-
Library Management System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
-
Church Management System 1.0 - 'search' SQL Injection (Unauthenticated)
-
WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)
-
Church Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
-
Online Food Ordering System 2.0 - Remote Code Execution (RCE) (Unauthenticated)
-
Budget and Expense Tracker System 1.0 - Authenticated Bypass
-
Filerun 2021.03.26 - Remote Code Execution (RCE) (Authenticated)
-
Budget and Expense Tracker System 1.0 - Remote Code Execution (RCE) (Unauthenticated)